One side-effect of cards (which may or may not be a drawback) is that the probabilities change as you work your way through the deck - unless you shuffle after each draw, but that would really slow things down.
You could do something like RuneQuest, which uses a d100 to resolve the attack, and switches the d10s (so tens become units and vice versa) to determine the hit location. So for example if you rolled 37 to attack, you'd hit location 73.
However the solution I prefer is to roll a Chessex Hit Location d12 along with the other dice. There's no way you can accidently confuse the die for something else, and you don't need to look up the result in a hit location table. The drawback is that you need to buy a special die, but I enjoy collecting unusual dice anyway, so I don't mind.
You could do something like RuneQuest, which uses a d100 to resolve the attack, and switches the d10s (so tens become units and vice versa) to determine the hit location. So for example if you rolled 37 to attack, you'd hit location 73.
However the solution I prefer is to roll a Chessex Hit Location d12 along with the other dice. There's no way you can accidently confuse the die for something else, and you don't need to look up the result in a hit location table. The drawback is that you need to buy a special die, but I enjoy collecting unusual dice anyway, so I don't mind.